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DETAILED ACTION 

1 . Claims 1-20 have been examined. 

Priority 

2. Acknowledgement is made of Applicant's claim for foreign priority based on an 
application jiled in Republic of Korea on 06 July 2002. 

Claim Rejections • 35 USC §112 

3. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

« 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

4. Claims 5 and 16-20 are rejected under 35 U.S.C. 112, second paragraph, as 
being indefinite for failing to particularly point out and distinctly claim the subject matter 
which applicant regards as the invention. 

Claim 5 recites the limitation "a function of key distribution center". It is unclear 
whether this is intended to be the same as or different from the "a key distribution center 
function" recited in claim 1 . 

Claim 16 recites the limitation "a function of key distribution center". It is unclear 
whether this is intended to be the same as or different from the "a key distribution center 
function" recited in claim 12. 

Claim 17 recites the limitation "a first group key" on page 23. It is unclear 
whether this is intended to be the same as or different from the "a key distribution center 
function" recited in claim 12. 
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Claim 18 recites the limitation "a first group key" on page 24. It is unclear 
whether this is intended to be the same as or different from the "a key distribution center 
function" recited in claim 12. 

Any claim not specifically addressed, above, is being rejected as incorporating 
the deficiencies of a claim upon which it depends. 

Claim Rejections - 35 USC § 101 

5. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

6. Claims 9-1 1 are rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. 

With respect to claims 9-11, the "computer readable medium," in accordance 
with Applicant's specification, may be carrier waves. This subject matter is not limited to 
that which falls withjn a statutory category of invention because it is not limited to a 
process, machine, manufacture, or a composition of matter. Instead, it includes a form 
of energy. Energy does not fall within a statutory category since it is clearly not a series 
of steps or acts to constitute a process, not a mechanical device or combination of 
mechanical devices to constitute a machine, not a tangible physical article or object 
which is some form of matter to be a product and constitute a manufacture, and not a 
composition of two or more substances to constitute a composition of matter. 
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Claim Rejections • 35 USC § 102 

7. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

8. Claims 1-6, 8-10 and 1 1-19 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Asokan et al. ("Key agreement in ad hoc networks", Computer 
Communications, Volume 23, Number 17, 1 November 2000) 

As per claims 1 and 12, Asokan et al. discloses a cryptographic method/system 
using dual keys in a wireless local area network (LAN) system, comprising: 

(a) generating a first group key in N wireless terminals forming an ad-hoc group 
(an ad-hoc meeting -e.g. p1 , "They would like to set up a wireless network session... for 
the during of the meeting"), where N is equal to or greater than two (P5, "There are two 
parties A and B which share a weak secret P" and P6 "We can slightly modify this... .to a 
contributory multi-party protocol") ; 

(b) generating a second group key in a main wireless terminal (a leader - e.g. 
P6) to perform a key distribution center function among the N wireless terminals, and 
transmitting the second group key to (N-1) sub wireless terminals (P6, "An additional 
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round will... to pick a common session key and distribute it the members of the 
group.... he shares with them"); and 

(c) encoding data using the second group key, and transmitting the encoded data 
between the N wireless terminals (P4 "In a landmark paper [4], Bellovin and 
Merrit.... encrypted key exchange (EKE) and P5 "But the basic form of the generic 
protocol remains the same." Inherently, Asokan et al. teaches after the protocol is 
complete, the multi parties must communicate using the session key (the second group 
key) to encoding data and transmitting the encoded data among the N wireless 
terminals since the protocol is using encrypted key exchange (EKE), a well known 
protocol invented by Bellovin and Merrit disclosed on the P4 of the Asokan et al. 
reference). 

As per claims 2 and 13, Asokan et al. discloses a method/system as applied in 
claims 1 and 12. Asokan et al. further discloses wherein the first group key is generated 
using a group password of the ad-hoc group (P3, "choosing a fresh password and 
sharing it among those present in the room, P4 "In a landmark paper [4].... encrypted 
key exchange (EKE)... derive a strong and P5 "shared key starting from only a weak 
shared key") 

As per claims 3 and 14, Asokan et al. discloses a method/system as applied in 
claims 1 and 12. Asokan et al. further discloses wherein the main wireless terminal 
encodes the second group key using the first group key, and transmits the encoded 
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second group key to the (N-1) wireless terminals (P5, "In step 1 A sends Ea encrypted 
with the weak secret P... .At this point, each player will compute the session key as 
K=f(Sa, Sb) and P6, "One obvious way... and distribute it to the members of the group 
using the pairwise session keys he shares with them") . 

As per claims 4 and 15, Asokan et al. discloses a method/system as applied in 
claims 1 and 12. Asokan et al. further discloses wherein the main wireless terminal is a 
creator of the ad-hoc group (P 18, "for example,... the leader Mn has a greater say in the 
final session key... before finding one that leads to a particular type of K" and "In some 
ad-hoc networks there may already be a natural leader or ordering"). 

As per claims 5 and 16, Asokan et al. discloses a method/system as applied in 
claims 1 and 12. Asokan et al. further inherently discloses wherein when the main 
wireless terminal is withdrawn from the ad-hoc group, the main wireless terminal 
transfers a function of key distribution center to a sub wireless terminal selected from 
among the (N-1) sub wireless terminals, so that the sub wireless terminal acts as the 
main wireless terminal (P16, "Therefore, when there is no a. priori leader or 
ordering... The general approach... This computation can be car- and P17, "ried out... to 
their distance from the reference value" and P20, "If groups are dynamic, the session 
key needs to updated when the composition of the group changes"). 
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As per claim 6, Asokan et al. discloses a method as applied in claim 1 . Asokan 
et al. further discloses modifying the second group key in the main wireless terminal 
according to a predetermined modification time period (P5, "session key"- a session key 
is a key that is just used for one communication session and then discarded), and 
transmitting the modified second group key to the (N-1) sub wireless terminals (Page 
20, "If groups are dynamic, the session key needs to updated when the composition of 
the group changes"). 

As per claims 8 and 17-18, Asokan et al. discloses a method/system as applied 
in claims 1 and 12. Asokan et al. further discloses: 

if the first group key is created, encoding a second group key request message 
from one of the (N-1 ) sub wireless terminals, and transmitting the encoded second 
group key request message to the main wireless terminal (Page 5, "B extracts Ea, 
generates R randomly, encrypts it with Ea, and returns it to A in step 2"); 

decoding the second group key request message, using the first group key, in 
the main wireless terminal (P5, "The goal of the protocol is for A and B to mutually 
authenticate each other based on P, and to agree on a strong session key K...each 
player will compute the session key as K=f(Sa, Sb)") ; and 

creating a second group key according to the decoded second group key request 
message, in the main wireless terminal (P6, "an additional round... he shares with 
them"). 
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As per claim 9, Asokan et al. discloses the claimed method of steps as applied 
above in claim 1. Therefore, Asokan et al. discloses a computer readable medium 
having embodied thereon the claimed computer program for carrying out the method of 
steps. 

As per claim 10, Asokan et al. discloses the claimed method of steps as applied 
above in claim 3. Therefore, Asokan et al. discloses a computer readable medium 
having embodied thereon the claimed computer program for carrying out the method of 
steps. 

As per claim 11, Asokan et al. discloses the claimed method of steps as applied 
above in claim 8. Therefore, Asokan et al. discloses a computer readable medium 
having embodied thereon the claimed computer program for carrying out the method of 
steps. 

As per claim 19, Asokan et al. discloses a system as applied in claim 18. 
Asokan et al. further discloses wherein the second key management unit modifies the 
second group key according to a predetermined modification time period (P5, "session 
key"- a session key is a key that is just used for one communication session and then 
discarded), and transmits the modified second group key to each of the (N-1 ) sub 
wireless terminals (Page 20, "If groups are dynamic, the session key needs to updated 
when the composition of the group changes"). 

Claim Rejections - 35 USC § 103 
9. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

10. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

11. This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 

12. Claims 7 and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Asokan et al. as applied to claims 1-6, 8-10 and 11-19 above, further in view of 
Schneier ("Applied Cryptography" second edition, 1996) 

As per claims 7 and 20, the difference between the claimed invention and that 
disclosed in Asokan et al. is the latter does not disclose the claimed feature of the 
modified second group key is encoded using a non-modified second group key, and 
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transmitting the encoded second group key to the (N-1) sub wireless terminals. 
However, such missing feature in Asokan et al. is clearly taught section 8.6 Updating 
keys on page 180, of the aforementioned Schneier reference, the same field endeavor 
of key management in the network enviroment. It would have been obvious for a 
person having ordinary skill in the art to incorporate such well known feature as taught 
in the Schneier reference into the Asokan et al. method motivated by to provide "an 
easier solution is to generate a new key from the old key" (Schneier, Section 8.6 on 
page 180) 

Conclusion 

1 3. The prior art made of record and not relied upon is considered pertinent to 

applicant's disclosure. 

> Bellovin et al. (US Patent 5,241 ,599) discloses a cryptographic communication 
system, which allows two parties, who share a password to bootstrap a 
computationally secure cryptographic system over an insecure network. 
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examiner should be directed to April Y. Shan whose telephone number is (571 ) 270- 
1014. The examiner can normally be reached on Monday - Friday, 8:00 a.m. - 5:00 
p.m., EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on (571) 272-3859. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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